Skip to content
Op. Dr. Efkan Mehdiyev

Privacy Notice (KVKK)

Last updated: 22 October 2026

This is an English translation provided for convenience. If there is any difference, the Turkish version prevails.

This notice explains how your personal data is processed when you contact us through the appointment form on drefkanmehdiyev.com (the “Site”), WhatsApp, e-mail or telephone. It is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform.

1. Data controller

The data controller for personal data collected through the Site is Op. Dr. Efkan Mehdiyev. Contact: [email protected], Sultan Orhan Mah. İlyasbey Cad. No:38, 41400 Gebze / Kocaeli, Türkiye.

Özel Yüzyıl Gebze Hastanesi is a separate data controller for records created at the hospital during examination, tests and treatment (patient file, test results, billing, etc.), and those records are covered by the hospital’s own privacy notice.

2. Personal data processed

You do not need to share detailed health information to request an appointment. A short note is enough; your complaint can be discussed at the examination.

  • Identity data: first and last name
  • Contact data: telephone number, optionally your email address, and the related account details if you write by WhatsApp or e-mail
  • Request details: the appointment topic and the note you write in the form
  • Special category data: health information you choose to write in the note or your message
  • Security data: IP address, date and time and browser details kept by the server when you visit the Site

3. Purposes of processing

  • Receiving your appointment and information requests and replying to you
  • Scheduling and reminding you of your appointment
  • Keeping the Site secure and preventing misuse
  • Meeting legal obligations and requests from authorised bodies

4. Method of collection and legal grounds

Your personal data is collected electronically, partly by automated means, through the appointment form on the Site, WhatsApp, e-mail and telephone.

Identity, contact and request details are processed on the legal grounds that processing is directly related to establishing or performing a contract (responding to your appointment request) under KVKK Art. 5/2-c, and legitimate interest under Art. 5/2-f. Security data is processed under Art. 5/2-ç (legal obligation) and Art. 5/2-f.

Health data you choose to share is processed on the basis of the explicit consent you give separately in the form, under KVKK Art. 6/3. If you do not give explicit consent the form cannot be sent; in that case you can book through the hospital’s telephone line.

5. Transfers

Your name and contact details may be shared with Özel Yüzyıl Gebze Hastanesi so that your appointment can be made. Where required by law, data may be transferred to authorised public bodies.

Form submissions are delivered through a form service provider (Formspree); the Site is served through a hosting provider and a content delivery network (Cloudflare). If you write on WhatsApp, messages pass through infrastructure operated by Meta Platforms. These providers’ servers may be located outside Türkiye; such transfers are carried out in line with the conditions set out in KVKK Art. 9.

6. Retention

Data relating to an appointment request is kept for at most 1 year after the request is closed and is then deleted, destroyed or anonymised. Server logs are kept for a limited time for security. Records created at the hospital after the examination are kept for the periods required by health legislation.

7. Your rights under KVKK Art. 11

  • To learn whether your personal data is processed
  • To request information about it if it is processed
  • To learn the purpose of processing and whether it is used accordingly
  • To know the third parties in Türkiye or abroad to whom it is transferred
  • To ask for correction if it is incomplete or inaccurate
  • To ask for deletion or destruction under the conditions of KVKK Art. 7
  • To ask that corrections, deletions and destructions be notified to the third parties it was transferred to
  • To object to a result against you arising from analysis solely by automated systems
  • To claim compensation if you suffer damage from unlawful processing

8. How to apply

You can send requests about your rights, with information that verifies your identity as required by the Communiqué on the Procedures and Principles of Application to the Data Controller, by e-mail to [email protected] or in writing to Sultan Orhan Mah. İlyasbey Cad. No:38, 41400 Gebze / Kocaeli, Türkiye. Applications are answered free of charge within 30 days at the latest.

You can withdraw your explicit consent at any time by the same means. Withdrawal does not affect processing carried out before that date.